Track Remote Desktop Connections?

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

We have Windows 2000 servers that can be accessed with proper admin password
through Win XP Remote Desktop Connection on client computers. Only users
that have the password can log in remotely, however is there anyway to track
or tell if a remote connection is made? Does the server (Windows 2000) log
this type of connection in the Event Viewer anywhere, or anywhere else?

Thanks for your help!

Please excuse the crosspost, originally posted in public.security, located
this more specific newsgroup aftwards.

-Joe

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

Enable auditing of logon events in the security policy of the computers you
want to find this information on. You can do this in Local Security Policy
or at the domain/OU level. An event will be recorded for each logon attempt.
In Windows 2000 it may look like a console type 2 logon but I believe in
Windows XP Pro/2003 it will show as logon type 10 for RDP logons. --- Steve

http://support.microsoft.com/default.aspx?scid=KB;en-us;q248260 -- example
of how to enable local auditing.

"Joseph Scalise" <jscalise@advantageccs.org> wrote in message
news:OjnQ76xLFHA.2888@TK2MSFTNGP12.phx.gbl...
> We have Windows 2000 servers that can be accessed with proper admin
> password
> through Win XP Remote Desktop Connection on client computers. Only users
> that have the password can log in remotely, however is there anyway to
> track
> or tell if a remote connection is made? Does the server (Windows 2000)
> log
> this type of connection in the Event Viewer anywhere, or anywhere else?
>
> Thanks for your help!
>
> Please excuse the crosspost, originally posted in public.security, located
> this more specific newsgroup aftwards.
>
> -Joe
>